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IN THE CLAIMS: 

1. (currendy amended) A method for updating the configuration of a 
programmable logic device-based packet filtering system ("PLD system") o peratin g to 
filter packets received from a packet-based network using a protocol , comprising the 
steps of: 

operating the PLD system in accordance with first configuration dat a , wherein, in 
accordance with the first confiofuration data, the PLD system receives pac ket? including at 
least first packets fi-om the network, filters the first packets, and transmits t he filtered firgt 
packets to an electronic connection coupled to the PLD system, wherein the P LD ^stem 
filters the first packets at lea^t in part based on source/destination address infijrm^tion and 
ba ^ed on the first confi guration data: 

sending at leant a firjt paokct from a computing Sj^otom to the PLD ayatom over the 

network; 

in rcoponso to the first packet, sending at Icaat a a ooond packet from the PLD 
system to the oomputing ayatcm over the nctworlc, wherein the second paokot containa 
infonnation idcnti^ing the PLD ayatom and alao information indicative of one or more 
command a in accordanco with the protocol, wherein the PLD system opcratca in 

in rcoponGo to the accond paokot, s e nding at least a third packet from th e 
computing system to the PLD nyatcni, wherein the third paokct oompriscs a command in 
accordance with the protocol and containa at loaot second configuration data for the PLD 
syfltom; 

receiving second configuration data for the PLD system sent from a computing 
system- wherein the second configuration data is s electively received bv the PLD system 
based on version identification infonnation for th e PLD system, wherein the second 
configuration data are different from the first c onfiguration data: 
loading the second configuration into the PLD system; and 
operating the PLD system in accordance with the second configuration data^ 
wherein, in accordance with the second configur ation data, the PLD system receive? 
packets including at least second packets from the n etwork, filters the second packets, and 
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transmits the filtered secop rt packets to t he electromc connection C0upl94 to the PLD 
system, wherein PLD sys tem filters t he second pac kets at least in part based on 
source/destioatinn address informatjon a nd based on the second configuration data . 

2. (currently amended) The method of claim 1, further comprising the step of; 
after receipt of the third paokcit is rcocivcd by the PLD oy a tcm, saving th o second 
configuration H«t^, Qtnritip the second configuration data contained in the third packet in 
non-volatile memory coupled to ©f the PLD system. 

3. (original) The method of claim 2, wherein the non-volatUe memory comprises 
Flash memory, dectricaUy erasable and programmable read only memory or battery- 
backed-up random access memory. 

4. (currently amended) A method for updating the configuratio n of a 
programmable Inpic device-baised nacket filte rin g svstem f«PLP system") operating to 
filter packets received fi^om a packet-ba sed network, wherein the PLD system is one of.a 
plurality of PT.n svstems cou pled to receive packets from the netwo rk, comprising the 
steps of: 

operatin g the PJ .P s ystem in accordance with first configuration data, wherein, in 
accordance with the first co nfi puration da t a the PLD system receives packets inclu4inR ^.t 
lea.st first packets fi-om the network, process es t h e fi rst pack ets including at least a filterin g 
o peration, and transmits the processed fi rst packets to an electronic connection co^pled to 
the PLD system, wherein the PLD svstem processes t he first packets at least in part based 
on source/d pgtin^tinn a ddress information and b ased on the first configuration dat^; 

receivin g second configuration data for the PLD system sent fi-om a computing 
system over the network, wherein the sec o nd configuration data is selectively received via 
one or more second packets via the network, wher e in the second configuration data are 
different fi-om the first configuration data: 

loadin g the second configuration into the PLD system: and 

npptratinf T the PLD svstem in accordance with th e second configuration data, 
wherein, in accordance with the seco nd confiour ation data, the PLD system receives 
padcets incl udin g at lea.st third packets fi-om the ne twork, processes the third packets 
including at least a filte ring o peration, and trans mits the processed third packets to the 
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ftlftctrnnic connection coupled tn the PLD sys t em wherein PLD system prpcesses the third 
packets at least in part based on source/des ti natinn address information and based on the 
s^nd co nfiguration data: 

Hi p m cithod o f rinim 1 . Trh nrn i n n pliirnlitj' nfthW^ r.nnnnd packota oro reccivod by 
thoPLDoyatom. wherein, after receiving each of the thifd one or more second packets, 
the PLD system sends at least a fourth packet to the computing system over the network, 
wherein fee sidl fourth packets each acknowledge psf.ket acknowledRe^ receipt of a 
corresponding one of the ted one or more second packets. 

5. (currently amended) The method of daim 4, wherein after receiving each of 
the thifd nne or more second packets, the PLD system saves second configuration data 
from the thiFd nna or more second packets in non-volatile memory couplgdto ef the M£ 
system. 

6. (currently amended) The method of claim 5, wherein the PLD system saves the 
second configuration data in the non-volatile memory ef coupled to the ¥1^ system fi-om 
each of the tWrd pne or more second packets prior to sending each fourth packet 

fourth feird paolcets . 

7. (currently amended) Themethodof claim 5, wherem, after receipt by the 

computing system of a fourth packet that acknowledges receipt by the PLD system of a 
final thifd second packet, the computing system sends at least a fifth packet to the PLD 
system, wherein, in response to the fifth packet, the PLD system saves one or more data 
indicatmg that aU of the second configuration data has been received and stored in the 
non-volatile memory. 

8. (currently amended) The method of claim 4 wherein the second 
configuration data is loaded into the PLD system in response to a user command from a 
user. 

9. (ori^nal) The method of claim 8, wherein the user command comprises a 

command input by a switch. 

10. (original) The method of claim 9, wherem the switch comprises a physical 

switch on the FID system. 



I 

4 



PAGE Sri2 * RCVO AT 2/7/200S 12:03:14 AM [Eastern Standard Time] • SVR:USPTO.EFXRF-1(0 • DNI8:a72930e * CSIO:408 342 1 BBS * DURATION (mfn-ss):05-22 



FEB. 6.2005 10:39PM 



LOUDERMILK PiND 9SS0C 



ISO. 012 



11. (original) The method ofclaim 8, wherdn the user command comprises a 
command entered via the computing system. 

12. (currently amended) The method of claim 4 i, wherein one or more display 
devices provide visual feedback of the status of the PLD system. 

13. (original) The method of claim 12, wherein the one or more display devices 
comprise one or more LEDs. 

14. (original) The method of claim 12, wherein the one or more display devices 
comprise a liquid crystal display. 

1 5 . (currently amended) The method of claim 4 wherein the PLD system 
provides audio feedback indicative of the status of the PLD system. 

16. (original) The method of claim 12, wherein at least one LED indicates that 
the step of loading the second configuration data mto the PLD system is m process. 

17. (currently amended) The method of claim 4 4-, wherein the PLD system 
processes packets sent jfrom the computing system in order to d etermine if the packets 
^ent from the computing svstem contain one or more com mands to which the PLD system 
is responsive . 

18. (currently amended) The method of claim 17 -t, wherein the PLD system 
extracts one or more commands to which the PLD svstem is responsive in accordanc e 
with the protocol from the packets sent from the computing system. 

19. (currently amended) The method of claim 1, wherein the second pack e t 
«inbTHr>Q n ynrQifin iH ft ntifif^r for tho PLD r. yatom wherein the step of receiving second 
configuration data for the PLD svstem sent from the computing s ystem is selectively 
performed based on version identification information for the PLD system provided from 
the PLD system to the computing svstem . 

20. (currently amended) The method of claim 19, wherein the s econd pack e t 



an identification of the second configuration data that are to be recei ved bv the PLD 




version id ^nrificfftinn informa tion is used to determine 



svstem 




lordonoo with th e protocol to vrfiich the PLD gyst ^ 



responds . 
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21. (currently amended) The method of claim 1, wherein the s econd paokot 
eefft ain s infonnation that is indicativo of a location coupled to the network, wherein th e 
location containfl information that idcntifieg a plurality of command o in aooordanco with 
the prntnpnl tn ^\^h\^h t>^^ ^ ry^^^ rnnrnnHn the . gecond configuration data are stored 
in a location remote fi-om the PLD system . 

22. (original) The method ofclaim 21, wherein the location comprises storage 

coupled to the computing system, 

23. (original) The method ofclaim 21, wherein the location comprises storage on 
a second network, wherein the computing system accesses the storage via the second 
network. 

24. (currently amended) The method of claim 23, wherein the information that is 
indioative of the location oompris eg is identified bv an address of a node on the second 
network, 

25. (origuial) The method of claim 23, wherein the second network comprises an 
Internet network. 

26. (currently amended) The method of claim 25, wherein ^ information that is 
indicative of the location comprises a URL. 

27. (currentiy amended) The method ofclaim 4 4-, wherein the plurality of PI£ 
systems collectively respond to a plurality of commands tot include one or more first 
commands to which the PLD system responds and also include one or more second 
commands to which the PLD system responds. 

28. (original) The method of claim 27, wherem the first commands comprise core 
commands to which at least a second PLD system also responds. 

29. (original) The method of claim 28, wherein the second commands comprise 
custom commands to which the second PLD system does not respond. 

30. (original) The method of claim 1, wherein the network comprises a local area 
network 

3 1 . (original) The method of claim 1, wherein the network comprises an 
Ethernet-based network. 
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32. (currently amended) The method of daim 4 4-, wherein at least certain of the 
first, second or third packets comprise UDP packets. 

33 . (currently amended) The method of claim 4 h wherein at least certain of the 
first, second or third packets comprise TCP packets. 

34. (currently amended) The method of claim 4 h wherein at least certain of the 
first, second or thkd packets comprise Ethernet packets. 

35. (currently amended) The method of claim 4 -t, wherein at least certain of the 
first, second or third packets comprise link layer packets. 

36. (currently amended) The method of claim 4 -t, wherein at least certain of the 
first, second or third packets comprise networic layer packets. 

37. (currently amended) The method of claim 4 wherein at least certain of the 
first, second or third packets comprise IP packets. 

38. (currently amended) The method of claim 4 1, wherein at least certain of the 
first, second or third packets comprise transport layer packets. 

39. (currently amended) The method of claim 4 wherein at least cert dn of the 
first, second or third packets comprise IPX packets. 

40. (currently amended) The method of claim 4 -t, wherein at least certain of the 
packets sent by the computing system comprise broadcast packets having a predetermined 
address that are directed to a first predetermined port. 

41 . (currently amended) The method of claim 4 4-, wharein at least certam of the 
packets sent by the PLD system comprise packets having a predetermined source address 
that are directed to a s econd first predetermined port. 

42. (original) The method of claim 1, wherein the PLD system does not 
implement a TCP/IP stack, 

43. (origmal) The method of claim 1, wherein the PLD system comprises an 

FPGA. 

44. (origmal) The method of claim 1, wherein the PLD system comprises an 
Internet security system. 

45. (original) Themethodofclaim44, wherein the Internet security system 
comprises a firewall system. 
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46. (original) The method of claim 45, wherein the firewall system fflters pack^^ 

received from a second network. 

47. (currently amended) Themethodofclaim4 4-, wherein the PLD system 
comprises a device selected fi:om the group consisting of a PDA, a mobUe telephone, a 
portable computer, a game system, a household appUance, a video recording system and a 
paging device, 

48. (currently amended) The method of claim 4 45, wherein the fircwoU PL£ 
system operates in accordance with a first set of filtering rules based on the first 
configuration data, wherein the firewall PLD system operates in accordance with a second 
set of filtering rules bas^ on the second configuration data. 

49. (currently amended) The method of claim 4 4r, wherein the PLD system 
transmits packets containing information identifying the one or more commands in 
aGcordanco with the protocol to which the PLD system responds, wherein the information 
is transmitted at least in part in the form of comprisea XML code. 

50. (currently amended) The method of claim 4 h wherein the PLD system 
includes a first logic unit that processes packets sent by the computing system, wherein the 
first logic unit identifies one or more conmiands in the packets sent by the computing 
system, 

51. (currently amended) The method of claims SO, wherein the PLD system 
includes one or more second lo^c units coupled to the first logic unit that carries out one 
or more operations that correspond to the one or more commands. 

52. (currently amended) The method of claim 5 1 , wherein the PLD system 
includes one or more third logic units, wherein the third logic units carry out one or more 
logic operations that correspond to packets that the PLD system transmits to the 
computing system. 

53 . (currently amended) The method of claim 4 4r, wherein the PLD system 
includes first and second logic portions, wherein a first logic portion operates to 
communicate packets in accordance with the g protocol with the computing system, 
wherein the second logic portion operates to carry out a process that does not comprise 
communicating packets in accordance with the protocol with the computing system. 

8 

PACE 0/12 • RCVD AT 2/7/2005 12:03:14 AM [Eastern Standard Time} • SVR:USPTO-EFXRF-1/0 • DNIS:8729306 * CSID:408 342 1868 * DURATION (rrnn-ss): 05-22 



FEB. 6.2005 10:40PM LOUDERMILK RND RSSOC 



NO. 012 P. 10 



54. (currently amended) The method of claim 4 vv^erein the computing sy^ 
operates in response to software that is transmitted to the computing system from the 
PLD system. 

55. (currently amended) The method of claim 4 -t, wherein the computing system 
operates in response to software that is stored in a location identified by a packet from tiie 
PLD system, 

56. (original) The method ofclaim 55, wherein the location comprises a storage 
location on a second network coupled to the computing system, 

57. (original) The method of claim 56, wherem tiie location is identified by a 
network address or URL. 

58. (original) The method of claim 55, wherein the location is determined from an 
identifier for the PLD system, 

59. (currently amended) The method of claim 4 wherein the PLD system 
operates to perform a first process in accordance with the first configuration data, and 
wherein the PLD system operates to perform a second process in accordance with the 
second configuration data. 

60. (original) The method ofclaim 59, wherein the first process is different from 

the second process. 

61. (currentiy amended) The metiiod of claim 59, wherein, after tiie PLD system 
operates to perform the first process, wherein in response to an input the PLD system 
reconfigures to operate to receive packets in accordance with tiie one or more commands 
and no longer operates to perform the first process; wherein after loading of the second 
configuration data the PLD system operates to perform the second process and no longer 
operates to receive packets in accordance with the one or more commands. 

62. (original) The method of claim 1, wherein the PLD system comprises 
programmable logic having at least a first logic portion and a second logic portion, 
wherein, in response to loading of the second configuration data, the second logic portion 
is reconfigured and the first logic portion is not reconfigured. 
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